Shadowing - "Session ID not found"

[yoz2002]

We've deployed the FR2 console to a number of help desk users with the intention of them being able to shadow user sessions. The users have been granted Shadow access on the ICA connection and the CMC has been published to them with the necessary permissions to manage sessions.

When they attempt to shadow a session, after clicking ok to the &quot;Start Shadowing&quot; dialogue a DOS screen flashes on/off containing the text &quot;Session ID <sessionumber> not found&quot;. The attempt to shadow fails with no further errors.

I think this existed pre-SP2 but we're only just going live.

 

[mbarlam]

Make sure ICA Client is the most current. If shadowing works for you (Admin) and not your users, it's definitely a permissions problem.

 

[yoz2002]

Makes sense actually as I've since found that if the users are members of the local administrators group the shadowing works ok. Power users group membership results in the same error.

However, this isn't really ideal as it raises a number of security risks that are unacceptable. I've tried raising their rights on the connection to full access but without the local admins at an NT level it still doesn't work.

Thanks.G.

 

[bpryor123]

I am having the exact same problem and don't want to give away local admin access. Have you found any other work-arounds since your last post?

 

[yoz2002]

The workaround we've since found is to grant full access to the ICA connection (via connection manager)on each server to the help desk users.

The last response I made contradicts this but it was due to the sessions I was trying to shadow being started prior to the perms being reset.

So, grant full access to the ICA connection to the help desk users on all servers. Restart the IMA service on each box and hopefully I've not forgotten anything!